Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/AYWssxj1PLbVr_URF-ZIiz6BS4I.roa
File: AYWssxj1PLbVr_URF-ZIiz6BS4I.roa (raw, json)
Hash identifier: 9obR855p0IhaLrIXPPGSL2nYoYCxku1wM9uG/XbR5LA=
Subject key identifier: 01:85:AC:B3:18:F5:3C:B6:D5:AF:F5:11:17:E6:48:8B:3E:81:4B:82
Certificate issuer: /CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Certificate serial: 019E8D3D0503C6C6730AD005960C9A60863D
Authority key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/AYWssxj1PLbVr_URF-ZIiz6BS4I.roa
Signing time: Wed 03 Jun 2026 11:27:26 +0000
ROA not before: Wed 03 Jun 2026 11:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57395
IP address blocks: 185.155.192.0/22 maxlen: 22
194.93.8.0/22 maxlen: 22
2a07:9580::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:3d:05:03:c6:c6:73:0a:d0:05:96:0c:9a:60:86:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Validity
Not Before: Jun 3 11:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0185acb318f53cb6d5aff51117e6488b3e814b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:1a:a9:a3:79:5e:ed:58:e1:66:cb:69:d4:
26:66:0a:81:ce:2c:2b:d1:72:7a:df:53:3b:e6:0e:
f8:17:c7:9e:81:46:e3:ef:9e:8f:5d:27:b9:63:aa:
0c:e4:98:e3:19:ad:39:9a:02:d4:4b:96:4a:04:ca:
de:7b:d8:fb:df:88:13:43:55:1c:39:ed:41:85:86:
53:f2:2a:4b:c3:2c:08:0e:89:7d:11:bd:61:c3:fc:
33:f1:7e:08:33:92:36:59:de:f6:df:9b:d2:2c:61:
08:98:ad:78:2a:28:e7:61:99:9e:4c:52:14:64:95:
44:55:6d:aa:f1:02:39:52:ea:75:2f:91:e1:f8:8e:
4d:1c:ab:d3:2c:f9:3a:d9:b1:3c:40:e0:f9:ee:a4:
6a:a4:d6:c2:d7:be:b4:5f:18:3f:cf:63:82:58:ed:
e0:77:52:64:4e:07:f0:6c:10:37:f8:02:c6:98:2f:
5c:db:4a:08:7b:5b:47:59:bc:14:24:7c:73:3b:d4:
a8:93:8c:be:38:b8:a3:ef:6f:dc:43:70:bd:3c:ae:
12:c9:ff:ed:ee:39:c3:15:8e:e3:7a:6f:04:50:91:
ff:04:5f:5c:31:61:88:86:4d:24:89:bc:e3:45:d2:
c8:60:e9:cf:21:2c:00:85:45:a0:44:f7:af:e6:55:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:85:AC:B3:18:F5:3C:B6:D5:AF:F5:11:17:E6:48:8B:3E:81:4B:82
X509v3 Authority Key Identifier:
keyid:6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/AYWssxj1PLbVr_URF-ZIiz6BS4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.192.0/22
194.93.8.0/22
IPv6:
2a07:9580::/40
Signature Algorithm: sha256WithRSAEncryption
3e:7f:e7:ba:35:d3:de:2d:d9:78:3c:18:5b:a0:d6:3f:73:cd:
ff:57:cf:ab:32:11:57:21:26:a8:2e:a5:a1:39:31:4b:39:73:
d2:ec:d3:97:40:70:9b:81:99:b5:79:fe:9e:9c:7b:71:65:04:
94:ba:9b:8f:af:70:32:b3:61:89:8f:eb:fe:2f:cd:15:c9:9d:
ae:d7:0d:de:59:f7:c5:0a:9b:c3:84:01:4e:89:51:0a:bd:df:
d3:7d:76:26:2b:f2:3f:94:17:ea:1a:79:c6:f3:65:a0:d4:cd:
3c:85:9d:3e:34:78:e5:e0:8b:e8:f5:60:fb:f5:e1:90:05:7a:
44:b6:5e:91:ae:77:ca:b2:a1:53:dc:bf:c1:87:c4:74:81:09:
4e:ae:a7:a9:8e:9f:0e:53:16:27:bb:dc:58:a0:13:4b:dd:c2:
c7:74:e7:af:25:27:1e:ec:5e:f0:3c:65:4f:18:a7:9f:fd:89:
df:20:6c:f3:c8:09:06:dd:ee:a9:64:dd:4b:38:1b:5c:9a:41:
be:e5:dc:eb:dc:5d:63:5d:2b:64:c0:76:8b:45:64:51:a7:dc:
98:4f:c5:fc:af:6c:24:b5:4f:c3:51:1e:3d:ca:87:ac:ba:b8:
47:1c:9e:73:a9:8a:c6:b7:37:9d:83:5c:28:f1:06:9c:a7:d2:
1c:ed:76:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:37 2026 by rpki-client